Path Traversal Vulnerability in TeamCity Allows Limited Admin Actions

CVE-2024-27199
7.3HIGH

Key Information

Vendor
Jetbrains
Status
Teamcity
Vendor
CVE Published:
4 March 2024

Badges

📰 News Worthy

Summary

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

Affected Version(s)

TeamCity < 2023.11.4

News Articles

favicon imageSC Media

JetBrains patches new TeamCity authentication bypass bugs

TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.

4 months ago

favicon imagethecyberthrone.in

PravinKarthik

Read all of the posts by PravinKarthik on TheCyberThrone

7 months ago

favicon imageTrend Micro

TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types

CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.

7 months ago

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • First article discovered by Help Net Security

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database12 News Article(s)
.